Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: +Uh5oY3QbU0uJgTfH6TwIeVNSR1ddvFF/94F+Z6XJUg=
Subject key identifier: 36:93:FC:2F:D6:1A:71:44:A6:98:58:72:DC:5E:E2:77:E2:23:E7:AC
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01965500A7259731C45BD96F7C1345B4B5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:28 +0000
Manifest this update: Sun 20 Apr 2025 21:00:28 +0000
Manifest next update: Mon 21 Apr 2025 21:00:28 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: NSPJbLEfLQVnGpGWASu2BE0/DDoi3/tUyZ9sywCQlwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:a7:25:97:31:c4:5b:d9:6f:7c:13:45:b4:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Apr 20 21:00:28 2025 GMT
Not After : Apr 21 21:00:28 2025 GMT
Subject: CN=3693fc2fd61a7144a6985872dc5ee277e223e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:b5:a3:64:ed:f6:7a:4b:de:86:ad:28:36:
86:8d:7f:92:f4:0c:07:85:4f:a5:e5:cb:24:6b:eb:
35:ae:d1:4a:8a:35:49:e3:24:6e:2b:aa:8a:d4:8f:
14:86:b8:41:95:e6:95:28:5e:9d:2b:f0:2f:fd:dc:
74:e4:ff:f6:04:a2:69:c8:f0:00:ac:6c:ab:77:57:
07:c6:c6:eb:de:0a:2c:8a:8a:22:1e:4c:ce:bd:eb:
1b:c2:fb:5e:e5:7c:4f:64:66:85:3e:9a:76:15:10:
f0:64:58:34:35:52:06:41:19:5e:a4:6f:b7:01:89:
a4:20:e3:4d:0f:62:3d:50:46:70:e7:f5:45:ba:a0:
8a:5a:0e:eb:37:72:83:ca:df:68:c4:ee:7b:da:1e:
a8:fd:a7:30:4a:6a:82:c2:b6:33:8e:1c:b3:90:ab:
78:f2:71:33:28:0f:d6:4d:db:98:06:a8:cc:0a:8d:
f3:a5:0c:4a:c6:be:e7:10:a5:a4:a0:04:70:a4:e2:
85:11:4b:92:f2:68:87:dd:e1:27:49:91:52:5e:44:
5a:80:76:a0:31:dd:56:6d:8c:9e:5d:9c:bc:56:ba:
92:16:c5:05:9a:24:da:bd:38:e3:77:a3:8b:45:ac:
77:4e:f9:92:5b:d0:96:19:45:48:ac:23:0b:4c:9e:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:FC:2F:D6:1A:71:44:A6:98:58:72:DC:5E:E2:77:E2:23:E7:AC
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:40:20:97:05:5a:5a:98:cf:05:48:3b:d5:83:44:ab:ad:33:
f2:f2:71:73:cc:31:d6:a8:a6:bd:74:ec:e2:14:34:a2:b3:fc:
9b:93:32:6e:6d:b9:93:aa:04:a2:d5:89:de:bc:0f:c8:35:04:
0c:d2:e8:8f:25:66:4d:7e:2e:8f:f8:35:a9:9c:9c:ea:ed:0e:
e8:d4:2f:6d:7a:d6:e0:26:a2:88:ed:39:ff:30:ef:db:5d:9a:
53:4a:0a:1b:88:69:fc:6e:9c:40:c4:db:c1:44:92:df:f3:2f:
d1:cb:b7:b7:c5:56:15:a4:ed:e4:97:fd:e2:ab:af:13:c5:29:
85:ba:3a:d5:45:f8:09:c7:48:c6:bd:01:4b:1f:d8:ea:72:e7:
27:c2:7b:83:5b:d7:78:b5:0f:8e:b7:64:3c:4f:c2:82:18:1a:
1c:6b:2e:f9:6d:37:fc:a0:8c:26:b1:51:33:ef:c0:cd:ff:43:
af:19:a3:c3:49:da:a2:30:5a:89:5f:3c:74:da:dd:09:6b:dc:
1d:e9:86:04:2a:d8:9e:1b:f7:57:6b:1b:99:95:6a:39:da:e3:
a7:a4:aa:df:41:c5:8b:67:e8:70:7f:e9:cf:5c:f0:c6:e9:c8:
5d:17:5a:ea:ea:5f:84:ae:eb:19:2d:f1:15:3a:3f:37:ab:05:
96:b8:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:14 2025 by rpki-client